Senior Network Engineer

Our mission is to create the Experience of a Lifetime for our employees, so they can, in turn, create the Experience of a Lifetime for our guests. We own and operate the most renowned destination resorts in the world as well as regional and local ski areas outside major cities, and connect them all through one unrivaled network. We are looking for ambitious leaders, innovators and creators to join our talented team. If you’re ready to pursue your fullest potential, we want to get to know you!

Candidates for year-round positions are reviewed on a rolling basis. Applications will be accepted up to 90 days after the posting date, or until the position is filled (whichever is first).

Job Summary:

Vail Resorts is seeking a Senior Network Engineer to design, secure, and automate the networks that support our cloud platforms, enterprise data centers, and modern applications. This hands-on role combines advanced Microsoft Azure networking with network security, Kubernetes networking, and infrastructure automation.

Approximately 80–90% of the role focuses on cloud networking, data center network security, Kubernetes, and automation. Azure is the primary specialization, supported by working knowledge of AWS and GCP. Traditional enterprise networking represents a limited, supporting portion of the role.

Job Specifications:

Starting Wage: $89,348.00 - $127,640.00 + Annual Bonus

Employment Type: Year Round

Shift Type: Full Time hours available

Minimum Age: At least 18 years of age

Housing Availability: No

Job Responsibilities:

Cloud and Kubernetes Networking

Design and operate secure, resilient Azure networks, including VNets, routing, ExpressRoute, VPN Gateway, private endpoints, DNS, Azure Firewall, and load balancing.

Engineer connectivity across Azure, AWS, GCP, and data centers; troubleshoot routing, name resolution, segmentation, and application connectivity across hybrid environments.

Design and troubleshoot Kubernetes networking, including AKS, container network interfaces (CNI), ingress, service connectivity, and network policies.

Build network resilience into architecture and change plans to support disaster recovery, business continuity, and infrastructure modernization.

Network Security and Microsegmentation

Engineer and maintain Check Point firewall policies and security controls for cloud and data center workloads, including access rules, NAT, and secure connectivity.

Support and optimize Cato SASE for secure access, cloud connectivity, and consistent network security policy.

Implement Zero Networks microsegmentation to isolate workloads and reduce lateral movement; partner with cybersecurity teams to apply Zero Trust and least-privilege access.

Secure virtualized data center networks and workload traffic, coordinating routing, segmentation, and load balancing with infrastructure teams.

Automation and Engineering Leadership

Build reusable Terraform modules and Python/API automation for network provisioning, configuration, policy management, and validation.

Use Git and CI/CD workflows to deliver repeatable, reviewed deployments and enable self-service infrastructure provisioning with appropriate controls.

Lead complex incident analysis, document root causes, and implement lasting corrective actions; maintain architecture diagrams, standards, and operational procedures.

Collaborate with cloud, infrastructure, cybersecurity, application, and field technology teams; mentor engineers and provide limited support for traditional networking when needed.

Job Requirements:

Seven or more years of experience in network engineering, cloud networking, or network security engineering, or equivalent demonstrated expertise.

Advanced Azure networking expertise, including hybrid connectivity, cloud routing, ExpressRoute, private connectivity, DNS architecture, and segmentation.

Working knowledge of AWS and GCP networking, with practical experience designing or supporting connectivity in at least one of these platforms.

Strong TCP/IP, BGP, VPN, NAT, DNS, load balancing, and network security fundamentals, with the ability to troubleshoot complex hybrid environments.

Hands-on experience with enterprise next-generation firewalls and familiarity with Check Point; understanding of SASE, Zero Trust, microsegmentation, and workload isolation.

Practical Kubernetes networking expertise covering CNI, ingress, service networking, network policies, and application connectivity troubleshooting.

Hands-on Terraform experience and proficiency in Python scripting and REST API automation; ability to maintain reusable, version-controlled infrastructure code.

Strong communication, documentation, and analytical skills; ability to lead technical work independently, manage priorities, and collaborate across teams.

Preferred Qualifications

Direct experience with Check Point security gateways and management platforms, Cato SASE, and Zero Networks microsegmentation; Check Point Maestro experience is a plus.

Experience with Azure Virtual WAN, AKS, AWS Transit Gateway, AWS VPC networking, and GCP VPC networking.

Experience with Cilium, Calico, or similar Kubernetes networking technologies; Git-based CI/CD, Ansible, or other automation frameworks.

Familiarity with Nutanix AHV, VMware, software-defined data center networking, network observability, telemetry, and automated configuration validation.

Familiarity with Extreme Networks and Cisco routing and switching as supporting skills.

Relevant certifications in Azure networking, Check Point, Terraform, or enterprise networking.

The expected Total Compensation for this role is $89,348.00 - $127,640.00 + Annual Bonus. Individual compensation decisions are based on a variety of factors.

Job Benefits

Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons

MORE employee discounts on lodging, food, gear, and mountain shuttles

401(k) Retirement Plan

Employee Assistance Program

Excellent training and professional development

Full Time roles are eligible for the above, plus:

Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours)

Free ski passes for dependents

Critical Illness and Accident plans

Vail Resorts offers a ‘Hybrid’ work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming.

Please note that the ability to work in person or off-site, and the particulars related to such work, are subject to change at any time; and, accordingly, the Company reserves the right to change its policies and/or require in-person/in-office work or off-site work at any time in its sole discretion.

In completing this application, and when submitting related documentation, applicants may redact information that identifies their age, date of birth, and/or dates of attendance at or graduation from an educational institution.

We follow all federal, state, and local laws including restrictions on child/minor labor. Minors hired into this position will not be asked or permitted to engage in any activities restricted to adult workers.

Vail Resorts is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status or any other status protected by applicable law.

Requisition ID 518722 Reference Date: 11/05/2026 Job Code Function: Infrastructure